Privacy Policy

ALTHEANATURA® ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect information about you when you visit www.altheanatura.com or make a purchase from us. It applies in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

ALTHEANATURA® is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us at support@altheanatura.com.

2. What Data We Collect

We may collect and process the following personal data:

• Identity data: first name, last name
• Contact data: email address, delivery address
• Transaction data: details of products purchased and payment information (processed securely by Elavon — we do not store card details)
• Technical data: IP address, browser type, device type, pages visited, time spent on site
• Communications data: your preferences for receiving marketing from us and any correspondence you send us

3. How We Collect Your Data

• Direct interactions: when you place an order, fill in a form or contact us by email
• Automated technologies: as you interact with our website, we may collect technical data through cookies and similar technologies
• Third parties: payment processors (Elavon), analytics providers (e.g. Google Analytics)

4. How We Use Your Data

We use your data to:

• Process and fulfil your orders, including sending confirmation and dispatch emails
• Manage your relationship with us and respond to enquiries
• Improve our website, products and services
• Send you marketing communications where you have opted in (you may unsubscribe at any time)
• Comply with legal obligations

5. Legal Basis for Processing

• Contract: processing necessary to fulfil your order
• Legitimate interests: improving our website and preventing fraud
• Consent: for marketing communications
• Legal obligation: where required by law (e.g. tax records)

6. Sharing Your Data

We do not sell your personal data. We may share it with:

• Elavon — for secure payment processing
• Delivery partners — to fulfil and ship your order
• Analytics providers — to understand how our website is used (data is anonymised where possible)
• Legal authorities — where required by law

All third parties are required to respect the security of your data and treat it in accordance with UK GDPR.

7. Cookies

We use cookies to improve your experience on our website. These include essential cookies (required for the site to function), analytical cookies (to understand usage) and marketing cookies (where you have consented). You can control cookies through your browser settings.

8. Data Retention

We retain your personal data only for as long as necessary. Order and transaction data is kept for 7 years for accounting and legal purposes. Marketing consent is kept until you unsubscribe. Technical data is retained for up to 26 months.

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Erase your data ("right to be forgotten") in certain circumstances
• Restrict or object to processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at support@altheanatura.com. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. All payment transactions are encrypted via SSL and processed by Elavon, which is PCI DSS compliant.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this page periodically.

12. Contact & Complaints

If you have any concerns about how we handle your data, please contact us first and we will do our best to resolve it.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.